Archive for the ‘IT Management’ Category

318 Press Releases

Friday, December 17th, 2010

Today, 318 released two press releases pertaining to initiatives within the mobility space. These include the following:

http://www.marketwire.com/press-release/Challenged-by-Deployment-of-Apple-iPads-in-Your-Enterprise-Tips-From-318-Consulting-1371111.htm

http://www.marketwire.com/press-release/Leading-Enterprise-Class-Apple-Consultancy-318-Becomes-iPad-Reseller-1371114.htm

Also worth note is that 318 has been a reseller for Research in Motion, the makers of the Blackberry and Blackberry Enterprise Server, Google Apps and a number of other solutions that fit nicely into the mobility space. If you would like to discuss any of these topics please reach out to us at 877.318.1318 for more information on services and products that 318 can work to integrate and manage for your organization.

Use Microsoft Office With Google Apps

Saturday, November 27th, 2010

Google Docs live on Google’s servers and are edited in a web browser. One of the most challenging aspects of leveraging this type of a cloud environment is workflow. Looking at every users workflow before making institutional changes is so daunting a task that it is rarely performed, resulting in users being left out of the process and at times also resulting in a breakdown in adoption from these “edge cases.”

Luckily, Google is wise to this predicament and has acquired DocVerse, which has resulted in a new option from Google: Google Cloud Connect for Microsoft Office. Cloud connect was announced last week without much fanfare. But the Cloud Connect toolbar for Microsoft Office is one of the more important new features of Google Docs in a long time, because it bridges the gap between the cloud and the client. In so doing, Cloud Connect breaks down some of the more critical arguments against adoption in the enterprise: retooling the entire workforce, redesigning workflow and working with documents while offline.

At 318, we have been working closely with many of our customers on transitions of data to cloud environments. Whether you are using Google or a competing vendor, please feel free to contact your 318 account manager or our sales department to discuss how this announcement can help to ease a transition to the cloud for your environment.

Attachmate Acquires Novell

Tuesday, November 23rd, 2010

In a press release on their website, Novell has announced that they will be acquired by a company called Attachmate for $2.2 Billion. The announcement can be found at http://www.novell.com/news/press/novell-agrees-to-be-acquired-by-attachmate-corporation. Microsoft (or a consortium run by Microsoft) will also be acquiring a few hundred patents as part of the arrangement.

Attachmate will be operating Novell and SUSE as two separate business units, calling into question some of the strategy that seemed around the corner in previous quarters. This at the same time that Novell is rebranding its social products into Novell Vibe and Novell Vibe Cloud and really doing better than they have in a long time with products like Platespin, WorkloadIQ, Endpoint Management Solutions, Identity Manager and ZENworks. Novell has also had a lot of success in recent years leading Solaris to Linux migrations.

For many, this has come as a shock. 318 has been a Novell, Microsoft, Redhat and Apple partner for a number of years and can work with you to decide what this means for your organization. Please, feel free to contact our main office at 310-581-9500 or your Professional Services Manager for more information.

Changing The Password Policy on Windows Server 2008 Domain Controllers

Wednesday, June 2nd, 2010

There seems to be a bug (maybe feature?) in Windows Server 2008 where you cannot change the default password policies on a at least the first Domain Controller in a new Domain via Group Policy Management and editing the Default Domain Controller security policy.

You must make the changes in the Local Policies section of Active Directory on the Windows Server 2008 Domain Controller.
1. Start > All Programs > Administrative Tools > Local Security Policy
2. Security Settings > Password Policy

NOTE: You will see that the Password Policy for the domain controller is populated, unlike in GPMC.MSC where everything is “Not Configured” but has a confusing note about default settings being other than “Not Configured”.

http://www.petri.co.il/three-steps-initial-configuration-windows-2008-server-installation.htm

To further confuse the issue, it seems that in Windows Server 2008 R2, using the Local Security Policy to change the Password policy on the DC will NOT work. It will be grayed out. The Domain Controller policy then seems to default to the Default Domain Security Policy (not Default Domain CONTROLLER Security Policy). After changing the password policies under GMPC.MSC for the Default Domain Policy I was able to successfully get the needed password configuration settings for the Domain Controller. It seems that the Default Domain Controller Security Policy password settings are either no longer separate from the Default Domain Security Policy, or now the Default Domain Security Policy overrides the Default Domain Controller Policy. This happened on a fully patched Windows Server 2008 R2 x64 OS.

Installing Zenoss

Wednesday, December 30th, 2009

For 318 to monitor a device over the wan, there needs to be a 1 to 1 Firewall Rule. There needs to be a firewall rule, allowing SNMP traffic from the WAN to a device on the lan. For multiple devices, then each device will need a dedicated WAN IP with the firewall rule. SNMP runs on UDP on port 161

Install SNMP service in components will require I386 for .dll
Download and install additional SNMP dll files provided by SNMP Informant, http://www.snmp-informant.com
Once installed right click on SNMP click properties and go to the Agents tab:
Contact: (e.g. support@318.com)
Location: (e.g. 830 Colorado Ave. Santa Monica, CA)
Check all services below that
Move to next tab traps:
Community Name:(e.g. 318zenoss)
Click Add to list
Then click add and enter the Zenoss server address
Move to next tab Security:
Make sure send authentication trap is checked
Add community name 318zenoss read only
And check SNMP packets from any host
Click Apply and Ok

Restart the Service.

Add two firewall rules allow traffic from the Device (LAN) to the WAN zenoss address of the Zenoss Server

Next Add device in zenoss:
Log in as user
Click Add Device
Enter Device IP WAN IP Address for Device Name
SNMP Community: 318zenoss
Select the Server Class:
/Servers/Windows – Windows Server
/Servers/Darwin – Mac Server
/Servers/Unix – Linux/Unix Server

Add or select Location Path

Add Or Select Client Name as Location

Select Your Team As Group

Tier Zero Asset Development

Tuesday, November 17th, 2009

The staff at 318 is responsible for developing over 75 courses, 40 exams and thousands of pages of assets for ourselves and our customers, including vendors that you may have obtained certifications through. 318 is a firm believer in education, developing a substantial amount of documentation and testing materials for our own internal use and exclusive use for various customers. We are able to do this because we have a strong emphasis on education, which can be seen by the fact that 7 of our staff have become technical authors publishing books while at 318.

But developing assets that can be leveraged to decrease Total Cost of Ownership (TCO) for an organization is arguably a different beast. FAQs, knowledge base articles and pre-populated wiki entries are only the beginning to the self-servicing power that can be unleashed for your users. Concerned that you don’t have the deep technical backgrounds, the time to develop the required assets or the writing experience on staff, then let 318 work with you to develop a plan and assets that can be provided in a variety of means to meet the needs of your dynamically changing user base.

Contact 318 today for more on leveraging our experience to help you with your emerging zero asset needs.

Non-profits in Need of GroupWare?

Tuesday, November 3rd, 2009

Not-for-profit and looking at options for messaging and groupware moving forward? Then you need to take a 2nd or even a 3rd look at Google Apps! Not-for-profit organizations with less than 3,000 users can get Google Appls Education Edition for free! For a not-for-profit with more than 3,000 users you can get Google Apps Premier Edition at a 40% discount.

Imagine all the infrastructure that can be repurposed, all the networking and message hygiene that you won’t have to do any more and most importantly, how happy the users will be. If your interest is peaked give 318 a call today and we’ll be happy to work with you on a strategy, whether it’s Google Apps, Microsoft Exchange, Zimbra, Mac OS X Server, etc – 318 is agnostic to the platform and here to help!

318 Video on “Gone Phishing”

Friday, October 23rd, 2009

Thawte No Longer Offering Free Certificates

Monday, October 12th, 2009

Thawte is no longer offering free accounts for mail. As an interim, they are going to offer a free year (through a partner deal) of VeriSign’s similar service which is then $19 after that initial year.
https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=AD196&actp=LIST&viewlocale=en_US

When to Replace APC Batteries

Thursday, October 8th, 2009

All good networking server setups require a UPS (Uninterruptible Power Supply) to keep the equipment going long enough to properly shutdown after a power outage has occurred.

What is sometimes neglected is to regularly check your battery to ensure that it’s holding a charge, should the time come when you have to use it.

This is done by connecting the UPS to the network or a Server, and then running the proper diagnostic testing on the battery. Often times the software or the controller will test the battery on it’s own interval, but without the software you may not notice the gradual changes that occur when the battery slowly is no longer holding as much as a charge, or is able to keep the system up, as long as it used to.

Once this occurs, it is time to replace your battery.

Here’s a scenario, you have recently been assigned a new client, and they already have a power structure in place. A week or two goes by. One of the UPSs lights are all green, but constantly blinking. What does this mean, and what do you do? Here’s a little guide you can follow:

Symptom
Battery light is Red
Explanation
The battery is no long holding a charge

Symptom
The charge light is green, but blinking.
Explanation
The battery is only able to keep the power going less than what it is supposed to. Default is usually 2 minutes.

If you see red on the battery, then it’s a no brainer, time to replace the battery.

Back to the scenario, if you see blinking green, it’s a little tricky. This doesn’t mean that the battery is necessarily dead, it just means that the controller is saying that the battery can’t hold power on it’s own for longer than 2 minutes. Here’s what you do:
1. Login to the APC monitoring software and perform a runtime calibration test
2. If after the calibration test the lights are still blinking – it’s time to get a new battery. Sometimes though, it will return back to normal after the run time calibration test (about 1 hr after). In which case, all it needed was a good kick in the pants.

How to get a new battery:
1. Write down the model number of the unit and also get the serial number (The exact model number is at the rear of the unit, or behind the face plate.)
2. Get the serial number of the unit (by the face plate).
3. Get the serial number of the battery (on the battery towards the face plate).
Note: On some APC UPSs you can remove the battery, while the UPS is still plugged in so as not to have to shutdown servers.
4. Call APC to see if the battery is under warranty. If not, it’s still recommended to buy a battery through APC since they give a warranty on them.

Replacing the battery:
Once you get the new battery, check to see if the battery is hot swappable. If it is, go ahead and replace it with the server still connected. After replacing the battery INITIATE A RUN TIME CALIBRATION TEST FROM THE APC MONITORING SOFTWARE. If you don’t, the time wont be calibrated on the APC and you may get false results, or the battery may run down a lot sooner than it should. If you can’t install the APC monitoring software, then you will need to:
1. Charge the battery until it is full on the front panel
2. Power down all of the servers, plug a CRT or another non critical item into the UPS and unplug the UPS from it’s power source. Allow it to run down, and then charge it again. Doing this will initiate a automatic built in run time calibration.

TIPS:
Once you’ve been at a client long enough you will get a feel for how long a battery lasts in a UPS. It’s recommend that you replace it around the time that you’ve noticed it tends to begin to deteriorate. If they were all installed around the same time, try to replace them all at the same time – because if one fails the others are probably soon to follow (especially if they’re the same model).

This is a document in progress, so please add any thing else that may be of benefit.

Google Latitude, GPS and Development

Monday, July 27th, 2009

Google Latitude is a fairly new service from Google that allows you to find your friends. But Google Latitude is more than just that. Using Latitude’s API you can do a number of other tasks. You can pull location information and display it on a map of your own, which enables you to pull from multiple users. You can also export a “badge” from your Latitude account that shows you where a single device is at any given time, as can be seen here.



The API and the ability to embed data opens up the opportunity for a variety of custom mashup portals. Maybe you’re a delivery company looking to keep track of where each of your trucks are, or maybe you are an airline curious as to why your pilot is not at the plane, ready to fly or even tracking the location of each person on location at a production (ie – directly from RepTools). Google Maps has been an insanely successful tool for custom development opportunities for organizations. Adding Latitude to that mix goes beyond exporting an address from a database and displaying it on a map but instead gives you real time statistics on the location of your devices.

Google Latitude is supported by most smart phone’s and a number of other devices. There is also a Google Latitude app for the iPhone coming soon. For more on integrating Google Latitude into your solutions, contact your 318 Professional Services Manager today.

Low Cost Storage for VMware

Wednesday, July 15th, 2009

EMC owns VMware. EMC owns Iomega. As a great result of these two acquisitions EMC is now able to provide the StorCenter, a 1U shelf of storage with 4TB (~3TB with RAID5) of capacity that has been qualified to run VMware.  For environments looking to get started with Vmotion and some of the clustered aspects of VMware the Iomega StorCenter offers a nice alternative to the high dollar storage arrays that EMC offers under their own brand.

The StorCenter can provide iSCSI LUNs to host Virtual Machines.  It’s not going to get the same IO as storage of a higher class will get, but for smaller environments with 2 or 3 physical hosts and a number of virtual machines, the StorCenter allows a number of features that can’t be had through traditional direct attached storage.

As an EMC reseller, 318 can help guide you through the process of a containment or a consolidation project, whether you’re looking to deploy 300 TB of fibre channel based LUNs to accommodate your environment or 3TB, we’re here to help!

Uninstalling Service Pack 2 from Windows XP In Fusion (Due to Blue Screens)

Wednesday, April 22nd, 2009

1. Grab your Windows install CD.
2. Go to www.vmware.com/download/fusion/drivers_tools.html and download the SCSI Disk Driver (it’s a Zip file)
3. Extract the contents, it should be an *.fld file.
4. Add a floppy drive to the image in VM. Settings, Other Devices, +, Floppy, direct floppy to *.fld file.
5. Boot XP in Fusion. Press Esc to get to boot menu
6. Boot to CD.
7. Press F6 to add drive (it wont immediately do it, it will cycle through some stuff first).
8. Press S to add drive (it will now hit the floppy)
9. Choose the VMWare SCSI drive.
10. Press Enter
11. Boot in Recovery Mode (”R”).
12. Choose your install location (most likely “1”)
13. Authenticate to Windows with the Administrator account
14. Get to command prompt.
15. Type: cd $ntservicepackuninstall$\spuninst and hit Enter
16. Type: batch spuninst.txt and hit Enter (errors and file copies will scroll through)
17. Disconnect floppy once it finished scrolling.
18. Type: exit and then Enter (this’ll reboot it)
19. Hit F8 to boot into Safe Mode (it WILL take a while to let you through, if it takes longer than 10 minutes, power cycle VM)
If no icons, or start button appears (black screen for longer than 10 minutes) proceed to next step. If explorer.exe IS running, go to #25.
20. Send a CTRL+ALT+DEL
21. File > New Task (Run…)
22. In Open, type regedit
23. Go to HKLM>System>CurrentControlSet\Services\RpcSs
24. Right click “ObjectName”, click Modify, type in LocalSystem in the “Value data” box, and then click OK
25. Restart computer in Normal Mode.
26. Re-install VMWare tools to get your mouse back.
27. Find out why SP2 didn’t install right, and try it again

http://support.microsoft.com/kb/875350/

http://support.microsoft.com/kb/885523

http://communities.vmware.com/thread/130993

Oracle Buys Sun

Monday, April 20th, 2009

Sun was in merger talks with IBM.  Talks that had fallen through.  Today, the Sun website says “Oracle to Buy Sun.” Oracle is the largest database company in the world and has been tinkering with selling support contracts for Linux and the Oracle suite of database products, that already includes PeopleSoft, Hyperion and Siebel. This merger, valued at $7.4Billion, will give Oracle access to sell hardware bundled solutions, further the Oracle development product offerings and give Oracle one of the best operating systems for running databases on the planet.

Oracle doesn’t just get hardware and Solaris though.  This move also solidifies a plan for Oracle customers to integrate Sun storage.  Oracle had previously been working with HP in a partnership that never seemed to gain traction.  Then there is Java, MySQL, VirtualBox, GlassFish and OpenOffice.org.  A number of the Sun contributions will be Open Source projects, but overall it’s possible to see a strategy that can emerge from a new Oracle + Sun organization.

As a Sun partner, 318 can assist its clients through this transition, be it with storage, MySQL, Java, Solaris or Oracle middleware scripting.  Overall, this deal makes a lot of sense and 318 is behind doing whatever possible to ease our clients through the transition.

Finally, for those concerned that Oracle might just be buying Sun to kill off MySQL, keep in mind that the Open Source community built MySQL in the first place (or was integral to building it) and it can build another in its place just as easily, this time faster and with less required legacy support.  MySQL is not a fluke.  PostgreSQL or a newer solution will take its place if MySQL were to fall by the wayside under the Oracle helm. Oracle is not going to make MySQL into a martyr of sorts, and is going to want to capitalize on their investment (a Billion dollar purchase by Sun and obviously part of this purchase); especially with a clear business plan for MySQL to be profitable (which is why Sun bought them for such a lofty price in the first place). Overall, Oracle has no reason to kill MySQL; instead, with Siebel, MySQL, Oracle, PeopleSoft, etc – they can simply tout “All Your Databasen Are Belong To Us!”

Unraveling Unified Messaging

Friday, March 13th, 2009

There’s been a lot of talk the past year or two about unified messaging. You may remember the old ATT All in One commercial where a person was golfing and his important call would find him, and he wouldn’t miss the call. Or have you ever had a job where every morning you had to check your e-mail, then your voicemail on your phones, and then walk to the fax machine to check your faxes? Well, Google this week released a new service called Google Voice. Google Voice is just a revamp of their system called Google GrandCentral. You have one number that people will call, and Google will route the call to all of your phones to try and locate you, and allow you to essentially ignore the call or accept it. You can also search your emails, voicemails, and SMS messages from the web. Microsoft Exchange offers a system that will allow you to get all your email, voicemail and faxes in one centralized location. Weaver just released a service in February that will allow Asterisk users to have their voicemail transcribed automatically and e-mailed to them. Below is a chart of services offered by Google, Asterisk, and Microsoft Exchange 2007 Unified Messaging to give you a better understanding of what technology route you may want to go.

Microsoft Exchange 2007 Unified Messaging
Microsoft’s Exchange 2007 Unified Messaging goal is to tie in Email, Fax and Phone into one manageable place. An example that Microsoft uses is that first thing in the morning most people check their email, then check their voicemail, and after check their faxes. Exchange Unified Messaging has the ability to tie together all three of these communication technologies into a single place for management.

Exchange Unified Messaging on it’s own cannot serve a PBX function, but harnesses a current PBX infrastructure into Exchange for end users to have a seamless place to manage their communications. The current iteration of Exchange Unified Messaging is with Exchange 2007. To leverage the entire suite of features, you must use Outlook 2007.

Google Voice
Google Voice is a communication infrastructure much like Exchange Unified Messaging, but seems to be targeted for non-business consumers. Google Voice is the current iteration of what was once known as Google GrandCentral. Its purpose is unified messaging as well, as it ties in your Gmail, SMS and incoming phone calls into your phone account created on Google Voice. Google Voice is an IP-PBX (VoIP) that allows you to make and receive calls with unified messaging capabilities.

Receiving calls can be done through any cell phone that you have, or through their Google Voice web interface. Making calls can be done via GoogleVoice (web-based), or through any other phone (landline or cell phone). The price point is very good (as in free). The price is free for all calls made to US numbers (long distance charges to other countries apply, of course). It requires no additional hardware.

Asterisk
Asterisk is an open source IP-PBX (VoIP) platform based on Linux. It requires a computer to run on and can tie in your existing land line with almost any VoIP provider of your choice. Call pricing depends on your phone carriers.

 

Google Voice

Asterisk

Exchange 2007

Voicemail

Yes, stored on Google’s PBX Server.

Yes, stored on PBX Server.

Yes, originating from current PBX, but forwarded and stored in Exchange

Email

Yes, integrated with Gmail.

Yes, SMTP’d to host of your choice.

Yes, integrated with Exchange and Outlook

Transcribing VoiceMail

Yes

Yes, not natively as it needs to use VoiceScribe[1] and then emails you the trasncript

No, but allows the user to take notes (including manually transcribing voicemail) to allow voicemail to be searchable via Outlook

Price

The use is free, and calls to US numbers are free.  Your cell provider rates still apply, and Google has their own price for long distance calling[2].

Free to install and use, and configure.  The call price rate depends on your local and/or VoIP carrier.

Phone calls rates are based on your PBX/Call Provider.  Only certain PBXs are supported[3].  The price for Exchange is $699 for Standard or $3,999 for Enterprise depending on how many storage groups and databases per mailbox server role you need.[4]  Both come with unified messaging.

Can call more than one of your phones at a time to try to locate you.

Yes

Yes, but you need to purchase additional trunks (VoIP or PSTN)

Depends on PBX

Can automatically locate you and route calls depending on bluetooth proximity.

No

Yes

No

Native Address Book

Yes, integrated with your Google Account.

No

Yes, integrated with Exchange Contacts

Call Management

Yes, via your phones (and possibly through Google Voice)

Yes, via your phones or through HUD

Yes, through Outlook and possibly through your PBX Software

Fax

No

Yes, but it’s through VoIP, and not realiable[5]

Yes, through a standard fax line

VoIP

Yes

Yes

Depends on PBX

Listen to voice messages without changing their context to another application

Yes, integrated with Google Voice

No – you need to use whatever sound application is installed on your computer

Yes integrated with Outlook

Multiplatform

Unknown, but since it’s web based, it may work on Linux, Mac, and Windows.

Yes – Linux, Mac, and Windows

No, just Windows with Outlook 2007. You can play messages in Entourage, but may either have to change file type in Exchange from *.wma to *.wav, or have Mac users install WMP 9 for OS X[6]

Configure individual voice mail settings

Via phone or web

Via phone or web

Yes integrated with Outlook

View all voicemail in one location

Yes

Yes

Yes

Distinguish voice and fax messages from email messages within mailbox

No, just voice mail from email, and only through Google Voice

No

Yes integrated with Outlook

Determine whether a voice message has already been played

Unknown

No

Yes integrated with Outlook

Add notes to a voicemail message natively

Unknown

No

Yes integrated with Outlook

Reply to a voice mail with email

Unknown – not sure if it can work with blocked numbers or telephone numbers not in contacts.

No

Yes integrated with Outlook

Add telephone numbers received to Contacts natively

Unknown

No

Yes integrated with Outlook

Share VoiceMail

Yes

Yes

Yes

Adding a user

Free.  Requires that each user is registered with a Google account.

Free.  Just create a new extension for IP phones.  For non-IP hard phones, you must buy a FXS card (or to connect a regular phone to an ATA).

You must buy CALs for each user.  For unified messaging, you must have both the Exchange Standard AND Entprise CAL.  Exchange Standard CAL is $67, Exchange Enterprise CAL is $35.[7]  You must purchase both CALs for each user.  You also need to add a user to your PBX – pricing and licensing depends on PBX provider.

There are some things that may catch your eye (or not) when you first see this chart. Exchange Unified Messaging is expensive, but offers a lot of features that the other two don’t. From a “birds eye view” it may also fit your enterprise better if your companies’ locations use different types of PBXs, but you want to “unify” all of the communication in Exchange.

If you have a heterogeneous environment or non Windows environment, Asterisk or Google Voice may be a better route for you.

If you are concerned with regulatory compliance, Google Voice may not be your best choice since you do not have a centralized location of all your communication readily available.

When determining which choice is a better fit for your business, carefully weigh your options (price, compliance and room for expansion to name a few). It will be exciting to see how the technologies are managed, and what the future holds for unified communications. If you plan to roll out any of these services, or are in need of consultation, please don’t hesitate to let us know. We’re here to help.


File Replication

Thursday, February 19th, 2009

Performing replication between physical locations is always an interesting task. Perhaps you’re only using your second location for a hot/cold site or maybe it’s a full blown branch office. In many cases, file replication can be achieved with no scripting, using off the shelf products such as Retrospect or even Carbon Copy Cloner. Other times, the needs are more granular and you may choose to script a solutions, as is often done using rsync.

However, a number of customers have found these solutions to leave something to be desired. Enter File Replication Pro. File Replication Pro allows administrators to replicate data between two locations in a variety of fashions and across a variety of operating systems in a highly configurable manner. Furthermore, File Replication Pro provides delta synchronization rather than full file copies, which means that you’re only pushing changes to files and not the full file over your replication medium, greatly reducing required bandwidth. File Replication Pro is also multi-platform (built on Java), allowing administrators to synchronize Sun, Windows, Mac OS X, etc.

If you struggle with File Replication issues, then we can help. Whatever the medium may be, give us a call and we can help you to determine the best solution for your needs!

Terminal Server 2008 Load Balancing

Thursday, February 12th, 2009

Load balancing is fairly straight forward in Microsoft Windows Terminal Server 2008.  Before you get started you’ll need to have multiple terminal servers, a Windows 2008 Active Directory environment and a centralized location to store your user profiles. 

When setting up Terminal Servers with load balancing and redirected profiles, no single terminal server should get overloaded by users while another terminal server sits idle.  When a user tries to connect to the terminal server, the master terminal server checks the load on each one of the servers.  It then logs the user into the terminal server with the least load.  Since redirected profiles are setup, every user that logs in will have all of their desktop items, documents folder and pretty much everything that they will need.  The user does not even need to know that they are on a different terminal server then they were the last time that they logged in.

To install Terminal Server clustering first verify that you meet the prerequisites of centralized home folder storage, Active Directory 2008 and multiple terminal servers.  Then install the TerminalServer Session Broker service on each one of the servers.  Then on one of the servers, you need to add all of the terminal servers into the session directory under groups in Local Users and Groups.  You only need to add it on one server and the change will replicate.

The next thing you need to is setup an alias and put all of the IP addresses for the terminal servers to be associated with that alias.  Once complete, when you do an nslookup on that alias, it should display all of the IP addresses that you entered.           

Then you will need to make some changes to group policy.  It appears that you must have a 2008 Domain Controller setup with the most upgraded schema to be able to do this.   Go to Computer Settings -> Policies -> Administrative Templates -> Windows Components -> Terminal Services -> Terminal Server and then TS Session Broker.  In here you need to put the name of the alias under Configure TS Session Broker Farm Name.  Then put the name of main terminal server in Configure TS Session Broker name.  Also you need to enable Join TS Session Broker and also User TS Session Broker Load Balancing.  After you have that setup, save the Group Policy Object (GPO) and attach it to the Organizational Unit (OU) that holds the terminal servers.

Once your group policies are in place you can focus on making the lives of your users a bit easier by enabling redirected user profiles.  First, you will need a place to put all of the user profiles.  Then you will want to move all of the users that need to access the terminal servers into a new Organizational Unit, create a new group policy object and enable folder redirection.  To enable folder redirection, go to User Configuration -> Policies -> Windows Settings and then Folder Direction.  Here, enable each folder redirection policy that you feel the users in the organization will need (this is different for everyone and can require a little testing to get it perfect).  While the choices are a lot to consider at first, Appdata, Desktop and My Documents are the most standard ones to choose and represent a great starting point.  The basic setting is what you will most likely want to use and then just put the root path to your profile in.  It will then give you an example of where everything will be stored and you will verify that the user names and the folders that you created on the network share are the same.

Once all of the users will be able to log into any of the terminal servers and get the same exact environment no matter which server they log into you are mostly done.  Setting up load balancing, the worry of one terminal server being over used is no longer something you need to worry about with 2008.  Once the cluster is setup, the master terminal server will take care of the rest.  

Citrix XenApp: New Look, New Features, Same Great Product

Wednesday, February 11th, 2009

Citrix XenApp has been around much longer that its new name would suggest. Formerly known as MetaFrame Presentation Server, XenApp has been a reliable solution for many years. It is the premier solution for application publishing and remote workplace access, while it also helps to ensure the highest level of security with built-in encryption.

 

Customizable Citrix Authentication Window

Customizable Citrix Authentication Window

XenApp provides a seamless workplace environment that enables IT departments to centralize the management of data and resources in a granular and automated fashion. As all of your information is hosted on company servers as opposed to being distribution across numerous client machines there is an inherently lower security risk of data being compromised, virus infestations and of course untrustworthy users.

 

XenApp is one of the most mature products of its type. XenApp provides greater advantages over most remote workplace applications in that it utilizes software that enables it to run across all platforms of systems. This ensures Windows, Mac and even Unix/Linux clients can access the same information in exactly the same way – using the native Windows applications published through a web or Citrix client interface. A unified approach to management drives down administrative overhead and expense by allowing IT departments to focus on one interface rather than having to support various individual systems all with their unique quirks or configurations.

Citrix in URL

Citrix in URL

 

With Citrix, a user simply browses to the website where the Application is hosted and logs in. From there, the end-user has access to all the applications that they have been granted access to.

Citrix Application Selection Dialog

Citrix Application Selection Dialog

 

Access to applications can be based on granular, user based settings or as a result of larger, more scalable group memberships either local to the Citrix server or based on Active Directory. Either way, each unique user can be provided a very specific and unique user experience tailored to their needs. For some users, you may allow access to a full Desktop environment while for others you may limit access to only a small subset of applications.

Citrix in Action

Citrix in Action

 

When you are looking to have an enterprise-level deployment of Mac OS X, Citrix can help to ease the transition burden. For example, many applications are not available to the Mac. If Mac OS X users are not able to access the corporate ERP system then they are not full citizens of the enterprise. The same goes with obtain support for various browser incompatibilities that may exist with corporate Intranets and obtaining features not available in the Mac versions of applications, such as being able to auto-archive in Microsoft Outlook (which is not a feature of Entourage). All-in-all, Citrix can help you ease into an enterprise switching campaign rather than force all of your users into a culture shock of new applications, new ways of doing things and compatibility problems.

Citrix is also a scalable solution. The clustering options in XenApp are far easier to configure than with Windows Terminal Server. The failover is fast and less infrastructure is required as the Citrix server is able to manage most of the workload.

318, Inc is a trusted Citrix Partner well versed in providing Remote Workplace and Application Publishing connectivity for organizations in both homogenous and heterogeneous environments. Allow our highly-skilled technology consultants assess and recommend the ideal Remote Workplace solution for your organization.

Watch Flash Videos From Sprint Mogul/HTC Titan

Tuesday, October 14th, 2008

This article will describe how to watch Flash-encoded videos on Windows Mobile 6.1 devices such as the Sprint Mogul, HTC Titan, T-Mobile Wing, Verizon VX6800, and other handhelds sporting ARM processors and Windows Mobile 6.1.

1. If you have a version of The Core Pocket Media Player (TCPMP) installed on your handheld, go to Settings > System > Remove Programs and remove it.

2. Install the TCPMP-0.72RC1-ARM-PPC-recomp-03.CAB file, which is attached to the Documents tab of this Katana article. This is a specific build of TCPMP, which is optimized for running on Windows Mobile 6.1 Pocket PC Edition on ARM processors.

3. Install the FlashVideoBundle 1.4.4.CAB file, which is attached to the Documents tab of this Katana article. Note: you must install this file into the same location as the TCPMP bundle from Step 2. So if you choose to install the TCPMP onto your storage card, you must install the FlashVideoBundle in the same place, etc.

4. Expand and install the codecs inside of the Codecs–Plugins.zip file, which is attached to the Documents tab of this Katana article. Note that these plugins include additional codecs that are not necessarily used by YouTube, GoogleVideo, and other video sharing sites, but are still found on various sites. They come in handy.

5. Soft reset your phone.

Now, when you go to YouTube or other sites that use Flash video, you will be prompted to Play or Save the videos. If you select Play, the video will open in the TCPMP video player, where you will have the option to play it in full screen mode (the settings are self-explanatory). You can also opt to Save videos.

Configuring a SonicWALL for Fonality/Trixbox

Thursday, August 7th, 2008

The Fonality/Trixbox server and phones should be on the same subnet, separated from the data network.

On the SonicWall:

Under Network/Interfaces, create a new Interface for the Phone System. Under the Zone option, create a new Zone for the Phone System. Name the zone Phone System. Under the “Switch Ports” tab, assign it a port on the SonicWall. Label this port for the phone system (in the SonicWall OS and physically).

Change IP of a Fonality Server via SSH

Thursday, July 17th, 2008

Here is one way you can change the IP address of a Fonality server via SSH (in the event that you don’t have a monitor attached to the machine).

At the console, type:
/var/adm/bin/ip.pl -i

You are now prompted with the IP change screen. Note that this utility actually tests that it can use the IP address, so it will fail back if the IP address is in use.

Leopard Server: New Managed Preferences

Wednesday, June 11th, 2008

If you’re familiar with Managed Preferences in Tiger then you’re basically already familiar with Managed Preferences in Leopard Server. But there are some great new features that Apple has provided us with by popular demand. These include the following:

Applications
There are now more features to the Applications Managed Preference. You can allow or disallow applications by selecting them individually or a folder. This means that you can allow access to applications located in the /Applications folder but disallow all applications located in the /Applications/Utilities folder. There are also now controls for allowing specific widgets and disabling Front Row.

Finder
There are new options to limit users from doing tasks when in the Finder such as Ejecting a disk, connecting to servers, rebooting and burning disks.

Login
You can now control the list of users that are displayed to a user during login times to show Mobile accounts and network users. You can show/hide the restart button, disable automatic logon, enable Fast User switching, set the local computer record name to the name of the computer on the server, enable guest access, control the inactive time to logout users and configure computer based Access Control Lists.

Mobility
Mobility now allows administrators to set an expiry for a users home folder on the system they are logging into. This allows administrators to keep local desktop systems from getting polluted with hundreds of home folders without using custom scripts to do so. Administrators can also now force accounts on local systems to use FileVault with Mobility accounts to keep data on local systems as secure as possible and set quota’s for user home directories. Finally, it is also now possible to control the path that the user home folder is located on local desktops.

Network
Administrators can now Disable Internet Sharing, Airport and Bluetooth for client computers.

Parental Controls
Hide profanity in the dictionary, control access to web sites, set the amount of time per day that a computer is allowed to be used and set times when login is not allowed in this new Managed Preference.

Printing
Force users to put their user name, date and/or MAC address in a page that is sent with each print job.

System Preferences
Allow or deny access to each System Preference (including the new ones).

Windows XP: No longer being sold after June

Tuesday, April 15th, 2008

images.jpegMicrosoft has announced that as of June 30th, 2008 Windows XP will no longer be distributed. You will still be able to buy machines that run Windows XP but it will become increasingly difficult in the months that follow. Windows XP will be supported by Microsoft until April 14th, 2014. However, only security-specific patches will be released for XP after June.

Open XML Draft Approved

Saturday, April 12th, 2008

The Microsoft Open XML standard is what Microsoft is hoping will be the standard in document formats. The first step in that process is now complete with Office Open XML being accepted as a draft standard by ISO, the International Organization for Standardization. ISO is the world’s largest developer of standards and has no governmental affiliation.
Office 2007 created a stir by omitting the Open Document Format (ODF), which is already an ISO standard. Many had hoped that ODF would help to spark an uptick in the interest of applications such as OpenOffice.org as a replacement for the Microsoft Office Suite of applications. However, the ODF standard has had slow adoption in large part due to the Microsoft omission of it from Office.
noooxml.jpg
If Microsoft’s Open XML format receives ratification from ISO as a standard then it would introduce a pair of rival standards into the document community. In many ways, the non-official standardization of documents around the Microsoft doc format over the past decade has led to an unparalleled ability for organizations to trade information freely. However, many (especially in the open source community) feel that allowing Microsoft to hold all the cards is a dangerous thing and that by bringing about a truly open standard such as ODF there will be more options in the word processing suite that organizations can use.

The battle between ODF and Open XML is likely to rage on for years as the appeals and votes and red tape continue to drag on. Just to put things in perspective, ISO rejected the Open XML proposal in September of 2007 and after a rewrite based on input from vendors and members of ISO it was voted as a draft standard in March. The appeals process doesn’t close until June but we’re likely to see more red tape for awhile given the interests of the parties involved.

Resolving Common Blackberry Problems

Thursday, November 15th, 2007

TITLE
Common BlackBerry Problems

TOPIC
The are some very common issues that Consultants will encounter with our clients’ BlackBerry handheld devices. Consultants should be able to identify the cause of these problems in order to resolve or escalate the issue.

DISCUSSION
These are the common problems you will encounter -

1. Device not receiving/sending email
i. Check to ensure the user is receiving a data signal to the device
o If working on a Cingular device look for a capital GPRS in the upper right-hand corner next to the antenna icon.
o If working on a Verizon device look for a capital 1X in the upper right-hand corner next to the antenna icon.
ii. If either the GPRS or 1X symbol is not present, RESET the device
o Remove the battery for approx. 5 secs and replace to force a “hard reset” of the device.
iii. Check the BlackBerry Exchange Serve (BES) for messages stuck in the queue

3. If either the GPRS or 1X symbol is present but data (email) is still not being received check to ensure that Wireless Reconcile is ON
o Open email application > Open the Menu and select Options > Open Email Reconciliation and highlight Wireless Reconcile > use the Spacebar to change option to ON > Open the Menu and Save > Exit

A Webclient account is an online Internet web interface that allows you to configure certain parameters of your BlackBerry service. To setup a Webclient account, open an Internet browser, enter the address based on your carrier as indicated in the table below and follow the instructions for creating the new account.

Verizon

https://webclient.BlackBerry.net/WebMail/Window.jsp?site=vzw

Nextel

https://webclient.BlackBerry.net/WebMail/Window.jsp?site=nextel

T-Mobile

https://webclient.BlackBerry.net/WebMail/Window.jsp?site=tmo

Cingular

https://webclient.BlackBerry.net/WebMail/Window.jsp?site=mycingular

EarthLink

https://webclient.BlackBerry.net/WebMail/Window.jsp?site=earthlink

Using BackupExec 11d with Removable Drives

Thursday, October 4th, 2007

Connect all of the drives you will use. In many cases, you will have 2-3 Drives. It is important that each disk be assigned its own drive letter – If for some reason the mount with the same drive letter, backup exec will not properly identify it, nor will it properly track the sets on the disks when they are disconnected.

add them as removable backup-to-disk folders

backupexec will then create several folders on the root level of the disk. it is important that you properly size it.

when the jobs are told to use any device in the storage pool, it will automatically select the availalble media. Unlike retrospect, there is no need to create seperate scripts per drive.

-Eli

Getting Mail on an iPhone to Work with Kerio Mail Server

Wednesday, August 1st, 2007

This KBase article applies to IMAP connections to Kerio MailServer.

By default, Mac OS X Mail and the iPhone use different folders for Sent and Deleted messages than Kerio MailServer. Kerio MailServer stores its sent and deleted messages in folders named “Sent Items” and “Deleted Items”. By default, Apple Mail and iPhone use folders named “Sent Messages” and “Deleted Messages”.

What happens when you set up a Mail or an iPhone with a Kerio MailServer, is that rather than detecting and using the “Items” folders that Kerio uses, the Apple products simply create new “Sent Messages” and “Deleted Messages” folders. The problem becomes that anything sent or deleted from Apple Mail or iPhone goes into the “Messages” folders but Kerio WebMail or Entourage will continue to use the “Items” folders, thus splitting the users mail across separate folders. This can be easily remedied. I will split the instructions into an Apple Mail and iPhone section.

Apple Mail:
Once you create the account using the correct settings, Mail will create the two “Messages” folders on the Kerio Server. In the main window of Mail, you should see the two “Items” folders from the Kerio server below the standard Mail folders for Inbox, Sent and Trash in the sidebar. Select the folder name “Sent Items”, then in the menu bar choose Mailbox > Use This Mailbox For and then choose Sent. Do the same for the “Deleted Items” folder and choose Trash. Now you will see the “Messages” folders Apple Mail created in the sidebar. Simply right click on these and select Delete to remove them (this can also be done through webmail).

iPhone:
The iPhone, like Apple Mail, creates the two “Messages” folders. After setting up the account with the appropriate settings, you should be back at the Mail Settings screen. Select the account, now scroll to the bottom and select the Advanced button. From here you will see 3 items for Mailbox Behaviors: Drafts, Sent and Deleted Mailboxes. Drafts can be left as is. Sent Mailbox should show “Sent Messages” as the default. Select the Sent Mailbox menu and choose the “Sent Items” folder. Do the same for the Deleted Mailbox item, this time selecting “Deleted Items”. Now you will have to delete the “Messages” folders, which cannot be done from the iPhone menus. You can either do this from the Mail client on their computer or through webmail, either from the iPhone or a computer.

Adding an e-mail account to a T-Mobile Sidekick 3

Tuesday, July 24th, 2007

Adding POP3 or IMAP accounts

To add POP3 or IMAP accounts, perform the following steps:

1. At Jump screen, scroll to and select Email.

2. Press the Menu key.

3. Scroll to and select Settings.

4. Scroll to and select Accounts.

5. Press the Menu key.

6. Scroll to and select New Account.

7. At Account, type or select the following information:

At Protocol, select the protocol used by your mail server. It is recommend that you select the auto-detect setting.
At Mail Server, type the mail server information. If this field does not auto-fill after selecting the protocol, contact your e-mail provider.
At Port, do not change the number unless directed by your e-mail provider.
At Username and Password, type the username and password for your e-mail account.
At Email Folder, select the folder where your incoming e-mail will be delivered.

8. Select Create to save.

Note that even if you select IMAP and use port 143, it will still treat the mailbox as though it were POP. Messages will not be marked as read/not read when you look at them on the handheld.

Using Outlook Remotely with RPC over HTTPS

Friday, July 6th, 2007

Setting up RPC over HTTPS is different than setting up Entourage over HTTP/S. First, an overview of what HTTPS is. HTTPS is the secure form of HTTP, it stands for HyperText Transfer Protocol Secure. This means that you will need an SSL certificate for connection between Outlook and Exchange. RPC is what Outlook uses to synchronize special information over from Exchange. RPC stands for Remote Procedure Call, and is the special programming routine that allows the application (Outlook) to connect with Exchange via OWA.

Now that we’ve established what RPC over HTTPS is, an outline will follow of how to connect Outlook to Exchange using RPC over HTTPS on Windows 2003 Small Business Server.

Introduction:

Small business server comes with many things already installed and ready for use right out of the box for a company. Two of these things are Exchange and Remote Web Workplace. Remote Web Workplace seems to be an idea made by Microsoft so that an Administrator could remote into their server via HTTP/S, and from there can use many tools in Remote Web Workplace to administer the entire network infrastructure via the Small Business server.

Check List:
1. Are you using Small Business Server 2003?
2. Is Exchange functioning and setup correctly?
3. Do you have an SSL certificate?
4. Are ports 80 and 443 open (and 3389 if you’re doing this remotely)?
5. Do you know the NetBios name of the server (right mouse click My Computer and check the computer name)?
6. Do you have Outlook (preferably 2003)?
7. Are the client workstations that need remote access updated with SP2 for XP?

If you have this, then you’re ready to rock.

Getting it All to Work Together

1. Make Them a Member of Remote Web Workplace

Log in as Administrator to the Small Business server and open up Active Directory Users and Computers. Locate the users you want to have access (or create a security group) and add the group or user to the following group called, “Remote Web Workplace”.

NOTE: You may not see this group as a security group in Active Directory, but if you type in the name and press the “Check” button, it should underline itself. You have now confirmed that this is a valid Security Group.

2. Get The Facts

With the new user you created, login to https://mail.domainname.com/remote. This is the Remote Web Workplace that you are logging into. You should be greeted with a login. Use the credentials for the user (or pick a user from the security group) that is now a member of “Remote Web Workplace”. You should be able to log in. If you cannot, log in to Remote Web Workplace, log in as Administrator and see if you can log in. If you can log in with the Administrator account, check your settings that you’ve applied to the security group, or user, and ensure that they are indeed members of “Remote Web Workplace”.

Once you have logged in, to the right, there should be a link called “Configure your computer to use Outlook via the Internet”, click on it, and it will outline steps that are pretty darn close to what you should setup in Outlook. It’s basically a help file, but it will give you almost exactly what you will need to use RPC over HTTPS. Just in case, I will also outline the steps here that the link will post.

NOTE: It is important that your users can log in to Remote Web Workplace with the users that need access to RPC over HTTPS. If they cannot log in to here, you will NOT be able to user RPC over HTTPS.

3. Configure or Reconfigure the SSL Certificate

When you log in to Remote Web Workplace via HTTPS, you should be greeted with a pop-up that asks if you want to accept the SSL cert. Check the SSL certificate and MAKE SURE THAT THE WEBSITE NAME OF THE CERT MATCHES THE WEBSITE.

If it does, then log in from each computer that needs RPC over HTTPS and install the certificate from Remote Web Workplace by clicking on View Certificate, and then Install Certificate. You can double-check that the certificate is installed by opening up MMC, go to Certificates, pull up the one for User Certificates, and look for one named with the server or domain name as a Trusted Root. Again, make sure that the cert’s name (not the CA issuer) is called by the MX record name (or predetermined Exchange website name) and NOT THE SERVER NAME. After you install the certificate, close Internet Explorer, and reopen it, and log in to Remote Web Workplace. If you are prompted to accept the certificate again, something is wrong with the certificate, and you will need to create a new one.

If the certificate doesn’t match the Exchange website name or the certificate saved keeps prompting you to accept it, you will need to create a new certificate. You can do this by the following:
1. Download IIS 6.0 Resource Kit Tools, available from:

http://www.microsoft.com/downloads/details.aspx?FamilyID=56FC92EE-A71A-4C73-B628-ADE629C89499&displaylang=en

2. Run the application, and install SelfSSL
3. Click on Start -> All Programs -> IIS 6.0 Resource Kit -> SelfSSl
4. In the Command Prompt type the following:

selfssl /T /N:CN=

NOTE: should be your Exchange website name, ie., mail.domainname.com (without the less-than and greater-than signs).

5. Type “y” to replace the SSL settings for site 1.
6. Log in to Remote Web Workplace again, and display the certificate. Ensure it is now called what it is supposed to (HINT: Before you view the certificate there should be a green check mark for “Certificate matches website name”). Install the cert, close IE, and retest. You should not longer be prompted to accept the certificate.

NOTE: This is important because if the certificate does not match the Exchange website name the connection will FAIL. You will either get a “server not available error” or other unusual errors.

4. Configure Outlook (a.k.a, It’s all Downhill from Here)

NOTE: This is available in Remote Web Workplace under the link: “Configure your computer to use Outlook via the Internet”

1. Go to Control Panel -> Mail -> Profiles and create a new Profile
2. With the new profile create an e-mail account, make sure to choose Exchange.
a. For the server name put the NetBIOS name, NOT THE WEB NAME.
b. For the user name, put in the username of the user.

NOTE: Do not hit, “Check” it will not work.

c. Click on the “More Settings” button.
d. Click the Connection Tab.
i. Checkmark the box that says “Connect to my Exchange mailbox using HTTP”
ii. Press the Exchange Proxy Settings Button
1. For https:// put in the website name that we’ve been getting the certificate ready for.
2. Put a check mark for “Connect using SSL only”
3. Put a check mark for “Mutually authenticate the session when connecting with SSL”.
4. For “Principal name for proxy server:” put the following: msstd:mail.domainname.com
5. Put a check mark for “On fast networks…” and “On slow networks…”
6. For “Proxy authentication settings” change it to “Basic Authentication”
3. Press OK a bunch of times, Next, and then Finish.
4. Make sure that this profile is set to “Always use this Profile”
5. Save your settings
6. Test your settings, and if you’ve done everything right, you should be prompted for your credentials. After you have been authenticated, you should now start receiving e-mail, and be able to view the calendar and do all of the other Exchange type stuff that the users are used to.

Factory Reset for Brother MFC-8860DN

Tuesday, May 22nd, 2007

This reset should not clear saved addresses and quick-dials. It will reset the TCP/IP and SMTP/POP3 settings. This reset should be used when the machine is having memory issues or you are unable to upgrade the firmware.

1. Hold down the Menu button (keep holding for the duration)

2. Power the machine off (keep holding Menu)

3. Power the machine on (keep holding menu). Once you see the “Maintenance” screen, you can let go of Menu.

4. Enter 91 on the keypad and wait for the “Maintenance” screen to return (can take up to a minute)

5. Enter 99 – the machine should reset then reboot.

6. Once this has been completed, set the IP addressed as desired with the main control buttons and then you can remote access via a web browser and set up the SMTP/POP3 settings.